2c3fc2905c8761b05cf40c04d9b09ee7_JaffaCakes118 | Triage

Sharing

General

Target

2c3fc2905c8761b05cf40c04d9b09ee7_JaffaCakes118
Size

36KB
MD5

2c3fc2905c8761b05cf40c04d9b09ee7
SHA1

d6b953dc5007228b0a0d4607d61c56119b2695e4
SHA256

036abc926bf5e57dc247f1e42179daef6a76a97ce7404ed32e53e221cac584a4
SHA512

65582500d6329833d17913226a17ab7b1bb8c81ace17da15b486c282c43ac3b0db4cc38614d2267fbdfa593f7cd848cef7619942d5ff0ba3be456234259a0a64
SSDEEP

384:/1GCCdodRxsT8E06z0oBv4QdikJOHeqnO8GB05Mg:/AzCsAgnv4QdiPeqnU0ig

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c3fc2905c8761b05cf40c04d9b09ee7_JaffaCakes118

Files

2c3fc2905c8761b05cf40c04d9b09ee7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85729e3e4679b91240c6a142f596baad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord598
ord520
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord532
ProcCallEngine
ord535
ord537
ord645
ord571
ord685
ord100
ord616
ord617
ord652
ord580

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ